› Articles › Contact › Download › Misc › Home

Modifying NoScript

Email: thomas[at]northernsecurity.net
Url: www.northernsecurity.net

From www.noscript.net:
"NoScript provides extra protection for your Mozilla/Firefox or Flock browser: this extension allows JavaScript and Java execution only for trusted domains of your choice (e.g. your home-banking web site).

This whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality..."

NoScript is a very nice browser extension, it does however have a "funny" default whitelist. Since one reason to use NoScript is that you don't actually trust sites, there is no reason why a number of sites are whitelisted from the start. These are the ones we are about to remove.

Download the .xpi.

wget http://releases.mozilla.org/pub/mozilla.org/extensions/noscript/noscript-1.1.3.9-fx+fl+mz.xpi

Unzip it with unzip noscript-1.1.3.9-fx+fl+mz.xpi

The file we want to modify is components/noscriptService.js so make a backup of it.
Use your favorite editor and edit the line that looks something like

"chrome: resource: about:neterror flashgot.net mail.google.com googlesyndication.com 
informaction.com yahoo.com yimg.com maone.net mozilla.org mozillazine.org noscript.net hotmail.com 
msn.com passport.com passport.net passportimages.com"

Remove everything so the line only contains "chrome: resource:" and you're done.

Zip the files together and name the package .xpi. Install as usual.